Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-34687

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, including accessing or deleting files, or stealing session cookies which an attacker could use to hijack a user’s session. Hence, this could have impact on Confidentiality, Integrity and Availability of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.3%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-34687
  • Sap » Sap Basis » Version: 700
    cpe:2.3:a:sap:sap_basis:700
  • Sap » Sap Basis » Version: 701
    cpe:2.3:a:sap:sap_basis:701
  • Sap » Sap Basis » Version: 702
    cpe:2.3:a:sap:sap_basis:702
  • Sap » Sap Basis » Version: 731
    cpe:2.3:a:sap:sap_basis:731
  • Sap » Sap Basis » Version: 740
    cpe:2.3:a:sap:sap_basis:740
  • Sap » Sap Basis » Version: 750
    cpe:2.3:a:sap:sap_basis:750
  • Sap » Sap Basis » Version: 751
    cpe:2.3:a:sap:sap_basis:751
  • Sap » Sap Basis » Version: 752
    cpe:2.3:a:sap:sap_basis:752
  • Sap » Sap Basis » Version: 753
    cpe:2.3:a:sap:sap_basis:753
  • Sap » Sap Basis » Version: 754
    cpe:2.3:a:sap:sap_basis:754
  • Sap » Sap Basis » Version: 755
    cpe:2.3:a:sap:sap_basis:755
  • Sap » Sap Basis » Version: 756
    cpe:2.3:a:sap:sap_basis:756
  • Sap » Sap Basis » Version: 757
    cpe:2.3:a:sap:sap_basis:757
  • Sap » Sap Basis » Version: 758
    cpe:2.3:a:sap:sap_basis:758
  • Sap » Sap Basis » Version: 795
    cpe:2.3:a:sap:sap_basis:795
  • Sap » Sap Basis » Version: 796
    cpe:2.3:a:sap:sap_basis:796


Contact Us

Shodan ® - All rights reserved